Allowing Specific Networks to Access Public IP via HTTPS & SSH

I'm familiar with Cisco FWs but I'm new to forigate.

I need to configure specific networks to access public IP of the FW via HTTPS & SSH.

What's the best way of accomplishing this?